$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa File: 323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa (raw, json) Hash identifier: I4+NEX6R66u0VW30Vapwi0rSeN6ZQH3UcRMYkAu8gKU= Subject key identifier: E0:BC:9D:DD:ED:C7:DB:28:0B:E8:07:41:53:3E:20:C7:27:78:43:9D Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 1B59ADD5FCB0DE2B4476A8134174D79C5845CE55 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa Signing time: Fri 07 Jun 2024 09:00:00 +0000 ROA not before: Fri 07 Jun 2024 08:55:00 +0000 ROA not after: Fri 06 Jun 2025 09:00:00 +0000 asID: 58552 IP address blocks: 2404:fd00:face::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 18:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:59:ad:d5:fc:b0:de:2b:44:76:a8:13:41:74:d7:9c:58:45:ce:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jun 7 08:55:00 2024 GMT Not After : Jun 6 09:00:00 2025 GMT Subject: CN=E0BC9DDDEDC7DB280BE80741533E20C72778439D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:ec:75:9b:1e:f0:08:b5:8f:f8:f5:10:ac: 65:41:5d:18:e7:72:85:f8:b4:05:c5:b5:d2:7b:45: 39:e9:6b:d6:56:b8:2f:5d:5f:22:0e:ad:73:06:0d: 0f:be:14:14:06:8c:54:8b:a2:ac:f7:de:8b:7e:90: 70:81:94:ee:71:50:5d:5b:35:d2:bb:00:fa:8d:3c: 5f:2b:81:8e:85:49:26:62:a8:34:4d:b0:42:7f:90: 48:c5:c1:16:04:fb:6a:fa:f5:71:cc:8e:00:33:c9: 32:bd:3f:19:da:d2:20:37:31:64:70:24:e8:93:17: a7:c5:f9:45:69:3a:5d:79:37:30:1a:c9:1b:54:ab: ec:d2:ee:ca:09:58:35:6f:6a:a3:b1:23:e0:f6:1b: 99:dd:78:00:32:28:2e:22:df:66:63:fe:67:00:1a: 10:94:92:55:fe:56:ff:e1:2f:e2:78:ab:28:7f:14: c3:77:5c:ac:8d:46:64:59:36:24:b8:6e:ef:e4:f8: e4:6a:53:b5:51:fe:2d:4c:17:ef:76:15:f0:41:9e: 4d:df:99:24:e8:01:ef:fe:3c:ad:f3:82:7d:bf:99: 57:39:3e:a1:b3:97:97:af:6c:e7:5b:a7:bd:69:b9: 0b:45:21:0f:1b:95:a5:4e:83:44:17:31:e7:2a:90: 98:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:9D:DD:ED:C7:DB:28:0B:E8:07:41:53:3E:20:C7:27:78:43:9D X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a666163653a3a2f34382d3438203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:face::/48 Signature Algorithm: sha256WithRSAEncryption 1a:1f:03:1f:a6:d5:24:9c:0f:67:4d:33:9a:2f:aa:10:18:e4: bf:bd:05:e7:ec:e5:ac:70:78:e7:01:a1:d4:d3:97:df:60:1e: f1:f9:94:32:c2:cc:bb:1f:8c:4d:52:53:aa:58:2a:de:29:27: 20:52:b0:c0:1d:50:68:f7:cb:02:da:cb:a9:29:10:84:68:3c: 2a:91:2f:72:71:3d:f1:97:17:ad:e2:82:36:c4:ce:dd:c5:36: dd:8c:8c:ab:31:47:08:94:b8:27:f3:0a:22:f8:ac:08:cc:10: da:5a:44:ed:b2:97:72:1b:8e:ad:83:97:f1:87:e6:2f:a7:2d: 33:6d:15:2a:ee:d9:19:26:81:15:09:f9:9b:2e:5f:95:34:d9: 33:cb:e5:36:c0:69:df:1b:32:58:a3:67:05:7e:a8:ee:45:e9: a7:09:09:37:ba:47:5f:f5:4b:3e:b4:fa:b6:a5:29:f6:1f:59: c4:9d:22:12:22:bc:80:17:9e:63:85:f7:1a:84:a9:53:f2:7f: f6:7f:fe:35:76:2d:8b:6d:c9:01:33:63:19:f8:2a:15:cc:3a: b1:4a:cb:76:10:74:d0:5e:d4:f8:ad:7b:c5:85:8f:10:34:de: 22:53:59:be:5b:96:70:be:df:e8:d1:b6:58:66:d7:96:56:c9: 12:77:57:ad -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUG1mt1fyw3itEdqgTQXTXnFhFzlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNDA2MDcwODU1MDBaFw0yNTA2MDYwOTAwMDBaMDMxMTAvBgNV BAMTKEUwQkM5RERERURDN0RCMjgwQkU4MDc0MTUzM0UyMEM3Mjc3ODQzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFux1mx7wCLWP+PUQrGVBXRjn coX4tAXFtdJ7RTnpa9ZWuC9dXyIOrXMGDQ++FBQGjFSLoqz33ot+kHCBlO5xUF1b NdK7APqNPF8rgY6FSSZiqDRNsEJ/kEjFwRYE+2r69XHMjgAzyTK9Pxna0iA3MWRw JOiTF6fF+UVpOl15NzAayRtUq+zS7soJWDVvaqOxI+D2G5ndeAAyKC4i32Zj/mcA GhCUklX+Vv/hL+J4qyh/FMN3XKyNRmRZNiS4bu/k+ORqU7VR/i1MF+92FfBBnk3f mSToAe/+PK3zgn2/mVc5PqGzl5evbOdbp71puQtFIQ8blaVOg0QXMecqkJhzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4Lyd3e3H2ygL6AdBUz4gxyd4Q50wHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhNjY2MTYzNjUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM4MzUzNTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAT9 APrOMA0GCSqGSIb3DQEBCwUAA4IBAQAaHwMfptUknA9nTTOaL6oQGOS/vQXn7OWs cHjnAaHU05ffYB7x+ZQywsy7H4xNUlOqWCreKScgUrDAHVBo98sC2supKRCEaDwq kS9ycT3xlxet4oI2xM7dxTbdjIyrMUcIlLgn8woi+KwIzBDaWkTtspdyG46tg5fx h+Yvpy0zbRUq7tkZJoEVCfmbLl+VNNkzy+U2wGnfGzJYo2cFfqjuRemnCQk3ukdf 9Us+tPq2pSn2H1nEnSISIryAF55jhfcahKlT8n/2f/41di2LbckBM2MZ+CoVzDqx Sst2EHTQXtT4rXvFhY8QNN4iU1m+W5Zwvt/o0bZYZteWVskSd1et -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org